Skip to content

0305-docker-registry-service-priv-docker.registry.service File Permissions Not Set to 644 or More Restrictive¶

Rule ID¶

0305-docker-registry-service-priv

Category¶

container

Level¶

warn

Compatible Versions¶

Linux

Description¶

If you are using Docker on a machine managed by systemd, verify that the Docker registry.service file permissions are correctly set to 644 or more restrictive.

Scan Frequency¶

0 */30 * * *

Rationale¶

The Docker registry.service file contains sensitive parameters that may alter the behavior of the Docker daemon. Therefore, no user other than root should have write access to it to maintain file integrity.

Risk Item¶

Container Security

Audit Method¶

Execute the following command to verify that the file permissions are set to 644 or more restrictive:

stat -c %a /usr/lib/systemd/system/docker-registry.service

Remediation¶

Execute the following command:

#> chmod 644 /usr/lib/systemd/system/docker-registry.service

This sets the file permissions to 644.

Impact¶

None

Default Value¶

This file may not exist on the system. In that case, this recommendation does not apply. By default, if the file exists, its permissions are correctly set to 644.

References¶

CIS Controls¶

None